Updated CORS check and fallback.